[BlueOnyx:12873] Re: Renaming user accounts

Chris Gebhardt - VIRTBIZ Internet cobaltfacts at virtbiz.com
Wed Apr 17 08:34:23 -05 2013


On 4/17/2013 8:27 AM, Eric Peabody wrote:
> Chris,
>
> You are right that pam_abl will help prevent the attacker from
> successfully guessing the password.  But the problem is that pam_abl
> locks the accounts when the attacks are running, preventing the
> legitimate users from accessing their accounts. Changing the user name
> associated with the email address has significantly reduced the
> unauthorized activity's interference with legitimate operations.

In the BlueOnyx GUI, make sure that in Server Management > Security > 
Login Manager you are only using the HOST RULE and not the USER RULE. 
That way, only offending IP addresses will be blocked, not a username.

-- 
Chris Gebhardt
VIRTBIZ Internet Services
Access, Web Hosting, Colocation, Dedicated
www.virtbiz.com | toll-free (866) 4 VIRTBIZ



More information about the Blueonyx mailing list